Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File: EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier: Lt++4Bt7RSrNZtUreRgmWM+xEVn3dEEQ0PZvtUwWpus=
Subject key identifier: EC:AF:C0:A0:A8:55:9F:DF:78:C9:4A:47:FA:EC:34:CA:69:CB:0E:FE
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial: 01989E6069240F3E2D44CA0AA010EE195158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number: 0A8C
Signing time: Tue 12 Aug 2025 13:02:55 +0000
Manifest this update: Tue 12 Aug 2025 13:02:55 +0000
Manifest next update: Wed 13 Aug 2025 13:02:55 +0000
Files and hashes: 1: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: 3Gt18YCIwGWG6QXCwUVCO+NpiudI4E5FwJwH2XFKG7g=)
2: hjbzdQG0z4fmkgxJ5yW_AFN2Z3I.roa (hash: FIaXEpRqjmfrs5VrZ6nFL+BtqxgLq2lRPch8+CMAMWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:60:69:24:0f:3e:2d:44:ca:0a:a0:10:ee:19:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Validity
Not Before: Aug 12 13:02:55 2025 GMT
Not After : Aug 13 13:02:55 2025 GMT
Subject: CN=ecafc0a0a8559fdf78c94a47faec34ca69cb0efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e6:f9:03:0a:28:99:b5:45:1e:92:4c:c5:63:
17:82:5d:98:63:2b:52:01:11:6d:83:0f:8e:32:90:
e9:b6:f4:48:cc:fb:44:8b:12:5d:36:8a:b4:8d:83:
c1:a3:c0:86:bf:2a:08:3e:79:73:44:96:3a:a0:2d:
36:ad:c6:74:9d:bd:7e:22:9b:ce:ce:31:ac:d5:40:
65:dc:d6:e9:3d:2b:e6:0a:bd:fb:4f:23:50:3a:f9:
8d:9b:77:e5:48:a4:bf:33:eb:ee:76:6f:46:79:28:
87:d9:7a:27:93:14:f9:e2:0f:f1:a8:3a:60:50:b1:
f0:37:bb:dd:6d:3a:34:34:db:8b:e4:55:c1:bb:a2:
60:67:7b:3b:44:f4:7d:56:d7:01:70:6b:5e:3a:4e:
35:f8:b1:6a:43:df:a7:f9:d4:49:3e:44:b3:a0:c7:
59:22:bb:82:9d:01:d4:c4:73:81:10:72:e0:3a:7e:
c3:5f:c4:2d:d7:60:bb:d4:25:12:d1:69:11:31:cf:
5c:70:30:f8:12:cd:cd:1a:db:b5:4f:1d:92:e6:be:
4a:ec:b0:f6:16:c4:94:bf:69:1c:18:b4:ce:28:98:
03:e4:34:8f:ac:b1:1c:87:fd:57:7b:27:91:b6:2b:
fa:59:be:15:d2:61:7d:1c:36:ec:7d:f7:69:9b:10:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AF:C0:A0:A8:55:9F:DF:78:C9:4A:47:FA:EC:34:CA:69:CB:0E:FE
X509v3 Authority Key Identifier:
keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fd:b8:b1:09:f7:e1:88:72:d8:2f:bb:b5:39:67:d9:6b:6d:
8d:9f:3c:b8:17:cc:9c:57:17:d0:8e:fa:51:d3:f3:b7:2a:02:
61:46:bf:29:48:96:a9:a4:e1:9b:a0:9f:0c:08:e6:ba:ea:ce:
87:1c:3c:e9:81:57:48:90:58:46:a1:1b:43:8e:e1:79:4e:8c:
d6:4e:d0:9c:26:0d:5c:80:01:7b:e6:ab:3c:05:c0:1c:25:15:
be:f3:c7:b6:a8:39:4f:c0:47:f4:95:80:f5:26:be:51:ef:d4:
a5:eb:18:39:80:c3:1f:6a:44:3e:3f:ef:02:57:fb:85:36:9a:
08:73:73:e4:5d:7d:44:ec:71:88:53:15:c1:7c:c4:f7:0b:23:
59:f9:87:02:80:a8:e8:12:2c:02:b4:af:23:32:0b:6f:2a:a7:
d8:f4:93:b8:d1:8d:e7:fe:5b:94:39:92:49:34:d1:c1:0c:3f:
9c:21:e4:af:08:66:13:4b:df:bb:08:23:1f:a2:27:82:73:f9:
23:47:db:58:36:c5:c8:92:f3:a7:21:8c:aa:f3:44:ee:eb:e1:
f9:f6:1a:01:ac:76:e7:ce:a0:8b:31:ab:f8:85:cf:e3:43:95:
40:ff:4c:72:44:62:84:ab:ad:9b:20:20:a1:c2:99:d1:f2:19:
d8:26:11:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieYGkkDz4tRMoKoBDuGVFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDE5ZmRhZTljNTNkOGQyOGIxZTQxY2E5MTM5YzMzNTU2
YmE2MjUwHhcNMjUwODEyMTMwMjU1WhcNMjUwODEzMTMwMjU1WjAzMTEwLwYDVQQD
EyhlY2FmYzBhMGE4NTU5ZmRmNzhjOTRhNDdmYWVjMzRjYTY5Y2IwZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eb5AwoombVFHpJMxWMXgl2YYytS
ARFtgw+OMpDptvRIzPtEixJdNoq0jYPBo8CGvyoIPnlzRJY6oC02rcZ0nb1+IpvO
zjGs1UBl3NbpPSvmCr37TyNQOvmNm3flSKS/M+vudm9GeSiH2XonkxT54g/xqDpg
ULHwN7vdbTo0NNuL5FXBu6JgZ3s7RPR9VtcBcGteOk41+LFqQ9+n+dRJPkSzoMdZ
IruCnQHUxHOBEHLgOn7DX8Qt12C71CUS0WkRMc9ccDD4Es3NGtu1Tx2S5r5K7LD2
FsSUv2kcGLTOKJgD5DSPrLEch/1XeyeRtiv6Wb4V0mF9HDbsffdpmxDuzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyvwKCoVZ/feMlKR/rsNMppyw7+MB8GA1UdIwQY
MBaAFBHRn9rpxT2NKLHkHKkTnDNVa6YlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUt
MWNjNWZkMjU0NGU5LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUtMWNjNWZkMjU0NGU5
LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/24sQn3
4Yhy2C+7tTln2WttjZ88uBfMnFcX0I76UdPztyoCYUa/KUiWqaThm6CfDAjmuurO
hxw86YFXSJBYRqEbQ47heU6M1k7QnCYNXIABe+arPAXAHCUVvvPHtqg5T8BH9JWA
9Sa+Ue/UpesYOYDDH2pEPj/vAlf7hTaaCHNz5F19ROxxiFMVwXzE9wsjWfmHAoCo
6BIsArSvIzILbyqn2PSTuNGN5/5blDmSSTTRwQw/nCHkrwhmE0vfuwgjH6IngnP5
I0fbWDbFyJLzpyGMqvNE7uvh+fYaAax2586gizGr+IXP40OVQP9MckRihKutmyAg
ocKZ0fIZ2CYRZg==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:20 2025 by rpki-client